@kodax-ai/kodax 0.7.45 → 0.7.47

package/dist/types-chunks/{storage.d-BvTdjYQF.d.ts → storage.d-B1Jk6ryM.d.ts}

@@ -1,4 +1,4 @@
-import { n as KodaXSessionData, s as KodaXSessionLineage, v as KodaXSessionNavigationOptions, w as KodaXSessionRuntimeInfo, y as KodaXSessionStorage } from './types.d-HBbWT-iA.js';
+import { n as KodaXSessionData, s as KodaXSessionLineage, v as KodaXSessionNavigationOptions, w as KodaXSessionRuntimeInfo, y as KodaXSessionStorage } from './types.d-B_MIIApc.js';
 
 /**
  * Session Storage - Session storage abstraction layer
@@ -70,17 +70,61 @@ declare function createMemorySessionStorage(): SessionStorage;
 
 declare class FileSessionStorage implements KodaXSessionStorage {
     private readonly sessionsDir;
+    /**
+     * v0.7.46 — optional explicit project cwd for in-process embedders
+     * (KodaX Space) serving multiple projects from a single runtime.
+     * Threaded through `getGitRoot(this.hostCwd)` and `inspectWorkspaceRuntime({cwd: this.hostCwd})`
+     * so the workspace-mismatch check in `load()` compares against the
+     * project the embedder opened, NOT the embedder's startup directory.
+     * Unset → all paths behave identically to the pre-v0.7.46 form.
+     */
+    private readonly hostCwd?;
+    /**
+     * v0.7.46 F7 — explicit opt-in for the CLI-style "[Warning] Session
+     * project mismatch" stderr notice emitted from `load()`. Pre-v0.7.46
+     * the gate was `!this.hostCwd` which fired whenever the embedder
+     * hadn't supplied a cwd — but that ALSO matched SDK consumers who
+     * don't set cwd (e.g. KodaX Space), bleeding the yellow warning into
+     * their stdout/stderr UI channels on every cross-project load. The
+     * v0.7.46 default is `false` — silent. CLI surfaces that want the
+     * old behavior (warn when user resumes a session from outside its
+     * original project) can pass `emitMismatchWarnings: true`.
+     */
+    private readonly emitMismatchWarnings;
     constructor(opts?: {
         sessionsDir?: string;
+        cwd?: string;
+        emitMismatchWarnings?: boolean;
     });
     private writeQueues;
     private serializedWrite;
     private appendState;
+    private sessionDirCache;
+    private projectJsonWritten;
+    private migrationPromise?;
+    private ensureMigrated;
     /** Update watermarks. Only overwrites fields the caller actually provided. */
     private syncAppendState;
-    private getSessionFilePath;
-    private getArchiveFilePath;
+    private legacyFlatPath;
+    private legacyFlatArchivePath;
+    private projectDir;
+    /** Resolve (and cache) the project directory a write for `id` should land in. */
+    private resolveWriteDir;
+    private writeFilePath;
+    /**
+     * id-only locator (ADR-038 §7). Resolution order:
+     *   1. cached project dir for this id
+     *   2. bounded scan of project dirs:  <key>/<id>.jsonl
+     *   3. bounded scan of archived:      <key>/archived/<id>.jsonl
+     *   4. legacy flat:                   <sessionsDir>/<id>.jsonl
+     * On multiple matches (only possible for pre-FEATURE_219 same-second
+     * duplicate ids) it prefers the current process's project dir, else
+     * returns null with a warning rather than guessing.
+     */
+    private resolveSessionLocation;
     private readSession;
+    /** Write `<dir>/project.json` once per process per directory (best-effort). */
+    private ensureProjectJson;
     private writeSessionInternal;
     private mergeAndWriteInternal;
     appendSessionDelta(id: string, data: SessionData): Promise<void>;
@@ -101,12 +145,43 @@ declare class FileSessionStorage implements KodaXSessionStorage {
         sessionId: string;
         data: SessionData;
     } | null>;
-    list(gitRoot?: string): Promise<Array<{
+    /**
+     * v0.7.46 — `opts.limit` added so SDK consumers can request more than
+     * the legacy 10-entry cap. Default stays at 10 to preserve the
+     * interactive REPL picker's behavior. The `public-api.ts` fast path
+     * forwards the caller's `limit`; `deleteAll()` passes a large value
+     * so it can enumerate ALL sessions for the gitRoot.
+     *
+     * v0.7.46 — return now carries `createdAt` so the fast path in
+     * `public-api.ts` no longer silently strips it. Pre-v0.7.46 callers
+     * that only destructured `{id, title, msgCount, runtimeInfo}` are
+     * unaffected (extra fields are ignored).
+     */
+    list(gitRoot?: string, opts?: {
+        limit?: number;
+        includeArchived?: boolean;
+    }): Promise<Array<{
         id: string;
         title: string;
         msgCount: number;
         runtimeInfo?: KodaXSessionRuntimeInfo;
+        archived?: boolean;
+        createdAt?: string;
     }>>;
+    /**
+     * FEATURE_219 Phase 4 — whole-session archive (ADR-038 §4). Moves the session
+     * file together with its island sidecar into `<projectKey>/archived/`. Paired
+     * (never orphans the sidecar). No-op + returns false for a missing session.
+     */
+    archive(id: string): Promise<boolean>;
+    /** Restore an archived session back into its project directory. */
+    unarchive(id: string): Promise<boolean>;
+    /**
+     * Move a session + its island sidecar between two directories. Propagates a
+     * non-ENOENT rename error (e.g. Windows file-in-use) so a partial move is
+     * surfaced as a failure instead of silently splitting main + sidecar.
+     */
+    private movePair;
     delete(id: string): Promise<void>;
     deleteAll(gitRoot?: string): Promise<void>;
     /**

package/dist/types-chunks/{types.d-HBbWT-iA.d.ts → types.d-B_MIIApc.d.ts}

@@ -1,4 +1,4 @@
-import { m as KodaXMessage } from './types.d-B1uGoVTE.js';
+import { n as KodaXMessage } from './types.d-Cf-GCzac.js';
 
 /**
  * @kodax-ai/agent Types

package/dist/types-chunks/{types.d-B1uGoVTE.d.ts → types.d-Cf-GCzac.d.ts}

@@ -240,6 +240,69 @@ interface KodaXModelDescriptor {
 }
 type KodaXProtocolFamily = 'anthropic' | 'openai';
 type KodaXProviderUserAgentMode = 'compat' | 'sdk';
+/**
+ * FEATURE_216 v0.7.45 — Strategy KodaX uses to verify a provider's API
+ * credentials. Per-provider data-driven (set in `provider-capabilities.json`)
+ * because the 14 providers KodaX ships do not share a single zero-token
+ * verify primitive — empirically 3 distinct strategies are needed:
+ *
+ *   - `count-tokens`: Anthropic-protocol `messages.countTokens()` —
+ *     true 0-token (input_tokens reported but no model invocation).
+ *     Use for Anthropic-compat providers whose upstream implements
+ *     `/v1/messages/count_tokens`.
+ *   - `models-list`: `models.list()` — 0-token, authenticated GET.
+ *     Use ONLY when the provider's `/v1/models` endpoint actually
+ *     gates on auth (some compat layers expose it publicly → false
+ *     positives; others 401 even for valid keys → false negatives).
+ *   - `minimal-message`: `{messages,chat.completions}.create({max_tokens:1})`
+ *     — ~6-7 tokens / call. Universal fallback for providers where
+ *     the above two are unreliable. Cost is trivial for UI-button
+ *     "test connection" use cases (≈ $0.00001 per verify).
+ *   - `unsupported`: Provider has no verify primitive (CLI bridges
+ *     own credentials in their own subprocess token store; the SDK
+ *     does not enter that surface).
+ */
+type KodaXVerifyStrategy = 'count-tokens' | 'models-list' | 'minimal-message' | 'unsupported';
+/**
+ * FEATURE_216 v0.7.45 — Never-throws result envelope for
+ * `provider.verifyCredential()` / `verifyProviderCredential(name)`.
+ * Mirrors `side-query.ts` `SideQueryResult` pattern: every failure
+ * mode is captured in the returned object — no rejection, no throw.
+ */
+interface KodaXVerifyCredentialResult {
+    readonly ok: boolean;
+    /** HTTP status when applicable (verify primitives that hit the wire). */
+    readonly status?: number;
+    /**
+     * Error category. Stable for UI consumers to map to user-facing
+     * states ("invalid key", "no network", "provider doesn't support
+     * verification", etc.). `unconfigured` is set by the top-level
+     * helper when env var is missing — avoids the provider ctor throw
+     * (per FEATURE_198 model-capabilities exposure pattern).
+     */
+    readonly error?: 'unauthorized' | 'network' | 'timeout' | 'unsupported' | 'unconfigured' | 'server_error' | 'rate_limited' | 'unknown';
+    /** Upstream error body or short diagnostic, capped to 240 chars. */
+    readonly message?: string;
+    readonly durationMs: number;
+    /** Estimated token cost: 0 (count-tokens / models-list) or ~6-7 (minimal-message). */
+    readonly approxTokensSpent: number;
+    /** Which strategy ran (or 'unsupported' if no primitive was attempted). */
+    readonly strategy: KodaXVerifyStrategy;
+}
+/**
+ * FEATURE_216 v0.7.45 — Best-effort upstream model listing. Distinct from
+ * credential verification: this is for "model picker" UIs. Mixes upstream
+ * `/v1/models` data with static `provider-capabilities.json` fallback when
+ * the upstream endpoint is unreliable. NOT a cred test — for that, call
+ * `verifyProviderCredential()`.
+ */
+interface KodaXListModelsResult {
+    readonly ok: boolean;
+    readonly source: 'upstream' | 'static' | 'failed';
+    readonly models?: readonly string[];
+    readonly error?: string;
+    readonly durationMs: number;
+}
 interface KodaXCustomProviderConfig {
     name: string;
     protocol: KodaXProtocolFamily;
@@ -287,6 +350,15 @@ interface KodaXCustomProviderConfig {
      * override.
      */
     streamMaxDurationMs?: number;
+    /**
+     * FEATURE_216 v0.7.45 — Which verify primitive this provider supports.
+     * Optional: when unset, the SDK derives a default from `protocol`
+     * (anthropic → count-tokens / openai → models-list). Set explicitly when
+     * the upstream `/v1/models` is public (false-positive risk) or the
+     * `messages.count_tokens` endpoint is unimplemented (404), in which
+     * case `minimal-message` is the only safe fallback.
+     */
+    verifyStrategy?: KodaXVerifyStrategy;
 }
 interface KodaXProviderConfig {
     apiKeyEnv: string;
@@ -349,6 +421,15 @@ interface KodaXProviderConfig {
      * the ~RTT margin between client send and server kill timestamp).
      */
     streamMaxDurationMs?: number;
+    /**
+     * FEATURE_216 v0.7.45 — Which verify primitive this provider's compat
+     * base class uses for `verifyCredential()`. Sourced from
+     * `provider-capabilities.json` for built-in providers; for custom
+     * providers, falls back to a protocol-derived default
+     * (anthropic → count-tokens / openai → models-list) when the custom
+     * config does not set it explicitly.
+     */
+    verifyStrategy?: KodaXVerifyStrategy;
 }
 interface KodaXProviderStreamOptions {
     onTextDelta?: (text: string) => void;
@@ -397,4 +478,4 @@ interface KodaXProviderStreamOptions {
     signal?: AbortSignal;
 }
 
-export type { KodaXToolResultTextItem as $, KodaXProviderToolCallingFidelity as A, KodaXProviderTransport as B, KodaXReasoningCapability as C, KodaXReasoningMode as D, KodaXReasoningOverride as E, KodaXReasoningRequest as F, KodaXRedactedThinkingBlock as G, KodaXReviewScale as H, KodaXRiskLevel as I, KodaXStreamResult as J, KodaXAmaControllerDecision as K, KodaXTaskActionability as L, KodaXTaskBudgetOverrides as M, KodaXTaskComplexity as N, KodaXTaskFamily as O, KodaXTaskRoutingDecision as P, KodaXTaskType as Q, KodaXTaskWorkIntent as R, KodaXTextBlock as S, KodaXThinkingBlock as T, KodaXThinkingBudgetMap as U, KodaXThinkingDepth as V, KodaXTokenUsage as W, KodaXToolDefinition as X, KodaXToolResultBlock as Y, KodaXToolResultContentItem as Z, KodaXToolResultImageItem as _, KodaXAmaFanoutClass as a, KodaXToolUseBlock as a0, KodaXAmaFanoutPolicy as b, KodaXAmaProfile as c, KodaXAmaTactic as d, KodaXAssuranceIntent as e, KodaXCacheBoundary as f, KodaXContentBlock as g, KodaXCustomProviderConfig as h, KodaXExecutionMode as i, KodaXExecutionPattern as j, KodaXHarnessProfile as k, KodaXImageBlock as l, KodaXMessage as m, KodaXModelDescriptor as n, KodaXMutationSurface as o, KodaXProtocolFamily as p, KodaXProviderCapabilityProfile as q, KodaXProviderConfig as r, KodaXProviderContextFidelity as s, KodaXProviderConversationSemantics as t, KodaXProviderEvidenceSupport as u, KodaXProviderLongRunningSupport as v, KodaXProviderMcpSupport as w, KodaXProviderMultimodalSupport as x, KodaXProviderSessionSupport as y, KodaXProviderStreamOptions as z };
+export type { KodaXToolResultImageItem as $, KodaXProviderStreamOptions as A, KodaXProviderToolCallingFidelity as B, KodaXProviderTransport as C, KodaXReasoningCapability as D, KodaXReasoningMode as E, KodaXReasoningOverride as F, KodaXReasoningRequest as G, KodaXRedactedThinkingBlock as H, KodaXReviewScale as I, KodaXRiskLevel as J, KodaXAmaControllerDecision as K, KodaXStreamResult as L, KodaXTaskActionability as M, KodaXTaskBudgetOverrides as N, KodaXTaskComplexity as O, KodaXTaskFamily as P, KodaXTaskRoutingDecision as Q, KodaXTaskType as R, KodaXTaskWorkIntent as S, KodaXTextBlock as T, KodaXThinkingBlock as U, KodaXThinkingBudgetMap as V, KodaXThinkingDepth as W, KodaXTokenUsage as X, KodaXToolDefinition as Y, KodaXToolResultBlock as Z, KodaXToolResultContentItem as _, KodaXAmaFanoutClass as a, KodaXToolResultTextItem as a0, KodaXToolUseBlock as a1, KodaXVerifyCredentialResult as a2, KodaXVerifyStrategy as a3, KodaXAmaFanoutPolicy as b, KodaXAmaProfile as c, KodaXAmaTactic as d, KodaXAssuranceIntent as e, KodaXCacheBoundary as f, KodaXContentBlock as g, KodaXCustomProviderConfig as h, KodaXExecutionMode as i, KodaXExecutionPattern as j, KodaXHarnessProfile as k, KodaXImageBlock as l, KodaXListModelsResult as m, KodaXMessage as n, KodaXModelDescriptor as o, KodaXMutationSurface as p, KodaXProtocolFamily as q, KodaXProviderCapabilityProfile as r, KodaXProviderConfig as s, KodaXProviderContextFidelity as t, KodaXProviderConversationSemantics as u, KodaXProviderEvidenceSupport as v, KodaXProviderLongRunningSupport as w, KodaXProviderMcpSupport as x, KodaXProviderMultimodalSupport as y, KodaXProviderSessionSupport as z };

package/dist/types-chunks/{types.d-DM8zEJgF.d.ts → types.d-D2RNa5Y7.d.ts}

@@ -1,5 +1,5 @@
-import { X as KodaXToolDefinition, m as KodaXMessage, D as KodaXReasoningMode, Z as KodaXToolResultContentItem, T as KodaXThinkingBlock, G as KodaXRedactedThinkingBlock } from './types.d-B1uGoVTE.js';
-import { a as KodaXCompactMemorySeed, k as KodaXSessionArtifactLedgerEntry } from './types.d-HBbWT-iA.js';
+import { Y as KodaXToolDefinition, n as KodaXMessage, E as KodaXReasoningMode, _ as KodaXToolResultContentItem, U as KodaXThinkingBlock, H as KodaXRedactedThinkingBlock } from './types.d-Cf-GCzac.js';
+import { a as KodaXCompactMemorySeed, k as KodaXSessionArtifactLedgerEntry } from './types.d-B_MIIApc.js';
 
 /**
  * Layer A Primitive: Agent / Handoff / Guardrail / AgentReasoningProfile

package/dist/types-chunks/{utils.d-DSEX6Rq1.d.ts → utils.d-umRKgMAu.d.ts}

@@ -1,7 +1,7 @@
-import { l as BashPrefixExtractor, a1 as KodaXOptions, L as KodaXContextTokenSnapshot, K as KodaXAgentMode, a6 as KodaXRepoIntelligenceMode, A as AgentsFile, i as AutoModeStats, ah as KodaXSkillInvocationContext, _ as KodaXMcpServersConfig } from './bash-prefix-extractor.d-HrTUwtV7.js';
-import { a as SessionStorage$1 } from './storage.d-BvTdjYQF.js';
-import { y as KodaXSessionStorage, n as KodaXSessionData, A as KodaXSessionUiHistoryItem, s as KodaXSessionLineage, k as KodaXSessionArtifactLedgerEntry, w as KodaXSessionRuntimeInfo } from './types.d-HBbWT-iA.js';
-import { m as KodaXMessage, D as KodaXReasoningMode, q as KodaXProviderCapabilityProfile, E as KodaXReasoningOverride, h as KodaXCustomProviderConfig } from './types.d-B1uGoVTE.js';
+import { l as BashPrefixExtractor, a4 as KodaXOptions, M as KodaXContextTokenSnapshot, K as KodaXAgentMode, a9 as KodaXRepoIntelligenceMode, A as AgentsFile, i as AutoModeStats, al as KodaXSkillInvocationContext, a1 as KodaXMcpServersConfig } from './bash-prefix-extractor.d-D6hL0Cuv.js';
+import { a as SessionStorage$1 } from './storage.d-B1Jk6ryM.js';
+import { y as KodaXSessionStorage, n as KodaXSessionData, A as KodaXSessionUiHistoryItem, s as KodaXSessionLineage, k as KodaXSessionArtifactLedgerEntry, w as KodaXSessionRuntimeInfo } from './types.d-B_MIIApc.js';
+import { n as KodaXMessage, E as KodaXReasoningMode, r as KodaXProviderCapabilityProfile, F as KodaXReasoningOverride, h as KodaXCustomProviderConfig } from './types.d-Cf-GCzac.js';
 import * as readline from 'readline';
 import { SpawnSyncReturns } from 'child_process';
 
@@ -515,7 +515,21 @@ declare function saveConfig(config: {
     /** FEATURE_102 Phase 3 — cross-provider child fallback chain. */
     fallbackProviders?: string[];
 }): void;
-declare function getGitRoot(): Promise<string | null>;
+/**
+ * Get git root directory.
+ *
+ * v0.7.46 fix — accepts optional `cwd` so in-process SDK embedders (KodaX
+ * Space) that serve multiple projects from a single runtime can resolve
+ * the git root of the project the user opened, NOT the embedder's
+ * startup directory. Without `cwd`, `git rev-parse --show-toplevel`
+ * inherits the host process's cwd, which mis-tags storage operations
+ * for multi-project embedders (the same root cause as the
+ * `saveSessionSnapshot` gitRoot bug in agent-runtime/middleware/ shipped in v0.7.45).
+ *
+ * No `cwd` arg → behaves identically to the pre-v0.7.46 form
+ * (process.cwd() of the host).
+ */
+declare function getGitRoot(cwd?: string): Promise<string | null>;
 declare function rateLimitedCall<T>(fn: () => Promise<T>): Promise<T>;
 
 export { processSpecialSyntax as A, BUILTIN_COMMANDS as B, rateLimitedCall as D, registerConfiguredCustomProviders as E, runInkInteractiveMode as F, runInteractiveMode as G, saveConfig as H, touchContext as J, KODAX_CONFIG_FILE as K, PERMISSION_MODES as P, KODAX_DIR as f, KODAX_SESSIONS_DIR as g, KODAX_VERSION as h, PREVIEW_MAX_LENGTH as i, computeConfirmTools as l, createInteractiveContext as m, executeCommand as n, getGitRoot as o, getProviderList as p, getProviderModel as q, getVersion as r, hydrateProcessEnvFromShell as s, isPermissionMode as t, isProviderConfigured as u, loadConfig as v, normalizePermissionMode as w, parseCommand as x, permissionModeDisplayName as y, prepareRuntimeConfig as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kodax-ai/kodax",
-  "version": "0.7.45",
+  "version": "0.7.47",
   "description": "极致轻量化 Coding Agent - TypeScript 实现，支持 12 个 LLM 提供商，可发布为免 Node 单文件二进制",
   "type": "module",
   "private": false,
@@ -122,6 +122,7 @@
     "terminal-size": "^4.0.1",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3",
+    "vscode-languageserver-protocol": "^3.17.5",
     "widest-line": "^6.0.0",
     "wrap-ansi": "^8.1.0",
     "ws": "^8.18.0",